You're Not George Clooney, and This Isn't Ocean's 11
Andrew Brandt investigates targeted intrusion campaigns where adversaries engage victims in live conversational social engineering to deliver malware.
Summary
The Shift from Mass Phishing to Conversational Engineering
While automated malspam campaigns rely on generic lure templates, sophisticated threat actors increasingly engage high-value targets in direct, interactive conversations.
Analyzing Post-Breach Incident Telemetry
Sophos researcher Andrew Brandt reviews forensic evidence from targeted intrusions where attackers spent days establishing rapport across social media and professional messaging platforms.
Getting into Character to Coerce Self-Infection
By adopting mundane professional personas and maintaining realistic conversational pacing, adversaries effortlessly convince targets to execute malicious payloads without raising suspicion.
Defending Organizations Against Interactive Manipulation
Defeating conversational social engineering requires equipping employees with out-of-band verification procedures and deploying behavioral endpoint defenses capable of flagging anomalous execution.
Related talks
War Stories·47 min
Jayson E. Street
Demonstrates how generative AI tools enhance phishing and vishing operations and outlines strategies to build organizational situational awareness.
Creator Stage·19 min
Katherine Rackliffe
Presents empirical results from a university research study evaluating user vulnerability and defensive safeguards against AI voice-cloned vishing attacks.
Main Stage·43 min
Keanu Nys
Demonstrates how red teams can abuse legitimate Microsoft login branding parameters and OAuth endpoints to host convincing, high-trust phishing infrastructure.